AMENDMENTS TO THE CLAIMS 
Please amend the claims of the present application as set forth below. 
In accordance with the PTO's revised amendment format, a detailed listing of all 
claims has been provided. A status identifier is provided for each claim in a 
5 parenthetical expression following each claim number. Changes to the claims 
are shown by strikethrough (for deleted matter) or underlining (for added 
matter). 

Claims 1-35 were pending. 
10 Claims 11-16, 24-26, 29, 33, and 35 are canceled. 
No claims are added. 

Claims 7-10, 17, 27, 30, and 32 are amended without prejudice. 
Accordingly, claims 1-10, 17-23, 27, 28. 30-32, and 34 are pending. 
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1. (Original) A method, comprising: 

associating a digital signature with a web page; and 
delivering the web page to an electronic device capable of authenticating 
the digital signature and executing at least a portion of the web page after the 
5 digital signature is authenticated. 

2. (Original) The method as recited in claim 1 , wherein the associating 
further comprises attaching the digital signature to the web page. 

10 3. (Original) The method as recited in claim 1, further comprising: 

determining if the web page includes code to invoke a control object; and 
deriving the digital signature and associating the digital signature with the 
web page only if the web page includes code to invoke a control object. 

15 4. (Original) The method as recited in claim 1, wherein the web page 

includes a confirmation module that is used by the electronic device to 
authenticate the digital signature. 

5. (Original) The method as recited in claim 1, wherein the web page 
20 contains script that, when executed, invokes executable code that is executed 
on the electronic device executing the web page. 
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6- (Original) The method as recited in claim 1, wherein the web page is 
generated in an active server page (ASP) environment. 

7. (Currently amended) A method, comprising: 

5 receiving a web page from a server, the web page containing executable 

script that, when executed, invokes a control object, the web page having a 
s e gm e nt digital signature t hat can be used to identify un i qu el y i d e nt i f ie s a 
source of the web page; 

determining whether auth e nticat i ng t he source of the web page is 
10 authentic via the digital signature : and 

in an event that the source of the web page is authentic, displaying the 
web page and invoking the control object if th e w e b pag e i s auth e nt i cat e d . 

8- (Currently amended) The method as recited in claim 7, further 
15 comprising: 

in an event that the source of the web page is not authentic, refusing to 
invoke the control obiect. d e t e rm i n i ng i f th e sourc e of th e w e b pag e i s author i z e d 
to invok e th e contro l obj e ct; and 

d i sp l ay i ng th e w e b pag e only i f th e sourc e of th e w e b pag e i s author i z e d 
20 to invok e th e contro l obj e ct. 
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9- (Currently amended) The method as recited in claim 7, wherein the 
a uth e nt i cating determining further comprises a uth e nticat i ng th e sourc e of tho 
w e b pag e to identifying the source of the web page. 

5 10. (Currently amended) The method as recited in claim 7, further 

comprising: 

designating one or more authorized sources from which a web page that 
invokes a control object may be received; and 

executing script contained in the web page only if the determining 
10 auth e nt i cating th e sourc e of th e w e b pag e indicates that the web page was 
received from one of the one or more afi-authorized sources. 

11.-16. (Cancelled) 
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17. (Currently amended) A system, comprising: 

a web browser configured to access a web page having a digital 
signature; 

a processor configured to execute script contained in the web page; 
5 an executable control object that may be invoked by the script in the web 

page and is executable on the processor; and 

a confirmation module configured to authenticate the digital signature to 
determine based on authenticity of the digital signature, whether the control 
object should be invoked^ and 
10 wh e r ei n tho conf i rmation modu le i s ca lle d wh e n the control objoot is 

i nvoked by tho scr i pt, tho contro l obj e ct e x e cut i ng on l y i f th e confirmation 
modulo auth e nt i cat e s th e d i gita l s i gnatur e. 

18. (Original) The system as recited in claim 17, wherein the 
15 confirmation module is called by the control object. 

19. (Original) The system as recited in claim 17, wherein the 
confirmation module is included in the control object. 

20 20. (Original) The system as recited in claim 17, wherein the 

confirmation module is included in the web browser. 
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21. (Original) The system as recited in claim 17, wherein the 
confirmation module is further configured to determine if the web page comes 
from a source that is authorized to invoke the control object and the control 
object is invoked only if the source of the web page is authorized to invoke the 
control object. 

22. (Original) The system as recited in claim 17, wherein the 
confirmation module is called by the web page prior to the web page invoking 
the control object. 

23. (Original) The system as recited in claim 17, wherein the 
digital signature module is not invoked if the web page does not have a digital 
signature. 

24. -26. (Cancelled) 
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27. (Currently amended) A web browser contained on a computer- 
readable medium of a client computer, comprising computer-executable 
instructions that, when executed by the client computer, perform the following: 

determining if a web page contains instructions to invoke a control object; 
5 determining if the web page has an associated digital signature: 

in an event that the web page has an associated digital signature, 
authenticating the web page using a -the digital signature; and 

invoking the control object if the source of the web page is authenticated. 



10 28. (Original) The web browser as recited in claim 27, further 

comprising: 

determining if the web page contains executable script to invoke a 
control object; and 

wherein the authenticating the web page further comprises 
15 authenticating the web page only if the web page contains executable script to 
invoke a control object. 

29. (Cancelled) 
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30. (Currently amended) The web browser as recited in claim 27, 
whoro i n tho control obj e ct is not i nvok e d if th e wob page do o s not i nclude a 
dig i ta l s i qnaturo further comprising in an event that the web page does not have 
an associated digital signature, refusing to invoke the control obiect . 

5 

31. (Original) The web browser as recited in claim 27, further 
comprising instructions to determine if an authenticated web page comes from 
a source that is authorized to invoke the control object, 

10 32. (Currently amended) A control object stored in a computer- 

readable medium, comprising computer-executable instructions that, when 
executed on a computer, perform the following: 

authenticating a web page that invokes the control obiec t, wherein the 
authenticating is performed based on a digital signature associated with the 
15 web page : and 

executing a data-handling task on the computer if the web page is^ 
determined to be authentic. 

33. (Cancelled) 

20 
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34. (Original) The control object as recited in claim 32, further 
comprising instructions to determine if a source of the web page is authorized to 
invoke the data-handling task prior to executing the data-handling task. 

5 35. (Cancelled) 
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